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Appl. No. 09/926,439 

Amdt dated June 4, 2005 

Reply to Of&cc Action of Feb. 2, 2005 

n. Remarks 

Claims pending in the current ^plication in view of the below presented amendments 
and arguments are claims 1-5, 1 -9, and 1 1-22. Claims 6 and 10 have been cancelled. 

As a preliminary matter, the Apphcant thanks the Examiner for noting that a certified 
copy of the priority Canadian appUcation number 2,299,824 has not yet been filed The 
Apphcant will be submitting a certified copy of the priority application in due course. 

Applicant also notes the provisional rejection of claims 1-10 under obviousness-type 
double patenting. However, Apphcant requests reconsideration of this provisional rejection in 
view of presented amended claims 1-5, 7-9, and new claims 1 1-22. 

The Examiner has rejected system claims 1-10 as-filed under 35 U.S.C. 102(e) as being 
anticipated over United States Patent No. 6,324,648 issued to Grantges ("Grantges'O- Apphcant 
would like reconsideration of this rejection in view of the below presented claim amendments 
and arguments. 

System claim 1 has been amended to recite: 

A network resource access system for providing a network termiaal with access to a 
selected network resource device over a network for communication of translated source data 
from the network terminal to the network resource device, the system comprising: 

a resource registry including resource configuration data associated with the selected 
network resource device, the resource configuration data including a driver identifier for a 
resource driver associated with the selected network resource device, the resource driver for 
translating source data to produce the translated source data in a fomiat suitable for processing by 
the network resource device; and 

an authorization server for receiving a request from the network terminal for 

communication access to the selected network resource device, the request configured to include 
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a device identifier associated with the selected network resource device and user configuration 
data associated with the netwoik terminal, the authorization server being configured for 
determining the network terminal is authorized to access, according to the user configuration 
data, the selected network resource device associated with the device identifier and for 
determining the network terminal is configured with the resource driver associated with the 
driver identifier. 

Method claim 5 has been amended to recite: 

A method for providing a network terminal with access to a selected network resource 
device over a network for communication of translated source data from the network terminal to 
the network resource device, the method comprising the steps of: 

receiving a request from the network terminal for communication access to the selected 
network resource device, the request including a device identifier associated with the selected 
network resource device and user configuration data associated with the network terminal; 

obtaining resource configuration data associated with the selected network resource 
device as identified by the device identifier, the resource configuration data including a driver 
identifier for a resource driver associated with the network resource device, the resource driver 
for translating source data to produce the translated source data in a format suitable for 
processing by the network resource device; 

determining the network terminal is authorized to access, according to the user 
configuration data, the selected network resource device associated with the device identifier; 
and 

determining the network terminal is configured with the resource driver associated with 
the driver identifier. 
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Support for amendments addressed to the operational characteristics and address of the 
net-work reso\irce device, and configuration of the network terminal, can be found in paragraph 
[0020] of the subject application which provides an illustrative list of computer resources "file 
servers, scanners, and printers" and at paragraphs [0022] and [0025]. Support for amendments 
addressed to the nature and function of the authorization server functionality can be found at 
paragraphs [0023], [0027], [0037], [0042] and at paragraphs [0051], [0052}, [0055] of the 
subject appHcation. 

A distinguishing feature of the claimed invention, as recited in amended independent 
claims 1 and 5, is that the authorization server configures the driver application on each network 
terminal for communication with a selected network resource device based upon a 
correspondence between the resource configuration data (e.g. user access level and/or device 
identification and/or driver identifier) associated with the network resotirce device, and a user 
configuration data (e.g. network address, user name) associated with the network terminal. With 
this arrangement, a system administrator is able to control/configure access to the virtualized 
network resource device by simply altering the associated resource configuration data. Further, 
with this arrangement, a user of the network terminal (when properly configured by the 
appropriate device driver) is able to communicate translated source data directly with a selected 
network resource device. None of the references cited by the Examiner, either alone or in 
combination, teach or suggest a network resource access system which possesses these features, 

AppUcant submits that contrary to the present invention, Grantges teaches a computer 

system 20 that provides autlienticated access from a client computer over an insecure> public 

network to one of a plurality of authorized applications, hosted by destination servers on a private, 

secure network. This authorized access is done through use of a client-side digital certificate. 

Initially, user 1 8 of cheat computer 22 enters the destination URL into a web browser portion of 

client computer 22. The web browser then issues an HTTP request across insecure network 26, 

wliich is routed to proxy server 34. The user receives a "pop-up" message regarding 
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establishment of the secure network connection. A user-selected digital certificate is then sent to 
proxy server 34. A first level authentication is conducted, outside the firewall, by proxy server 
34. If authenticated at this level, proxy server 34 then sends the information contained in the 
Ghent's digital certificate through firewall system 32 to gateway 38 to be authenticated at a 
second that involves examining the particulars of the digital certificate using the data stored on 
authorization server 46. If user 18 is authorized to access multiple applications, the next item 
after the "popup" message to be displayed to user 1 8 is an "options page", presenting the multiple 
choices. Once a particular appUcation is selected, the next item to be displayed for user 18 is the 
selected application. 

Accordingly, Applicant submits that in particular Grantges does not teach the dynamic 
matching of data translation/formatting capabilities of the network terminal with authorized 
access of the corresponding network resource device data processing capabilities. Further, 
Applicant directs the Examiner's attention to the fiict that the claimed network resource driver 
and the "driver apphcation" as interpreted by the Examiner in Grantges are not analogous art. 
Applicant submits that the resource driver is for configuring the network terminal for recognized 
data communication with the network resource device, while the interpreted "driver application" 
has nothing to do with configuration of device processing capabilities. 

Apphcant would like to bring to the Examiner's attention that Claims 1 and 5 have been 

amended to recite that the data to be transmitted is formatted so as to be suitable for processing 

by a network resource device, based on selection and configuration of an appropriate resource 

driver associated with the network resource device. The appropriately configured source driver of 

the system provides for translation of the source data for eventual processing by the 

corresponding network resource device. Accordingly, the present invention is directed to a secure 

unidirectional transfer of source or application data from the network terminal to a network 

resource device, as opposed to being a system for two-way secure real-time communication 
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between applications, as is the case with the system of Grantges. Further, the presently claimed 
invention provides for dynamically configurable authorized access by the terminal of the network 
resource device. 

In light of the above remarks, and amendments submitted herewith, the Applicant submits 
that claims 1 and 5 are neither taught nor suggested by Grantges, and the Examiner is asked to 
withdraw the rejection of claims 1 and 5. Further, as amended claims 2 through 4 and new claims 
1 1 through 16, and amended claims 7 through 9 and new claims 17 through 22 are dependent on, 
and narrower than, claims 1 and 5 respectively, the Applicant similarly submits that these claims 
are novel and inventive over the cited art. 

Further, Applicant notes the prior ait made of record but not relied upon and also submits 
that this art is not pertinent to the presently claimed invention embodied by claims 1 through 22. 

It is believed that the above remarks and amendments submitted herein have placed this 
present ^phcation in condition for allowance, and a Notice thereof is requested. Further, 
Applicant submits that no new matter has been introduced into the subject application by the 
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foregoing amendments. If the Examiner has further concerns, he is encouraged to contact 
Applicant's undersigned agent at 416-862-4318. All correspondence should continue to be 
directed to listed address shown below. 



Respectfully submitted, 

Grant Tisdall 
Agent for AppUcants 
Registration No. 53,902 

COWLING LAFLEUR HENDERSON LLP 
Suite 4900 

Commerce Court West 
Toronto, Ontario 
Canada M5L1J3 
Facsimile: (416)862-7661 
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